Images

405 images

Hardened container images

Every image is built from source on Wolfi, scanned to zero fixable CVEs, cosign-signed, and pinned by digest, with an SPDX SBOM and a SLSA build-provenance attestation you can verify. Nonroot, read-only rootfs, amd64 + arm64. 405 available now.

A 1
chartmuseum
Helm chart repository server with support for cloud object storage backends (S3, GCS, Azure, and more).
v0.16.624.0 MB
CI/CD & registrystandardApache-2.0
D 1
checkov
Checkov, the static analysis scanner for infrastructure as code (Terraform, CloudFormation, Kubernetes, Helm, Dockerfile, CI configs). From PyPI into…
v3.3.26116.5 MB
Security & supply chainstandardApache-2.0
A 2
cilium
The Cilium agent (cilium-agent, cilium-dbg, cilium-health, hubble, the BPF sources, CNI loopback and upstream's init scripts) built from the…
v1.20.2217.5 MB3 versions
Coordination & meshstandardApache-2.0
A 1
cilium-operator
The Cilium Operator, generic variant (cluster-pool IPAM, CRD registration, identity and endpoint garbage collection) for a Cilium install run with…
v1.20.234.6 MB3 versions
Coordination & meshstandardApache-2.0
A+
clamav
ClamAV antivirus engine built from the release tarball. clamd scans streams over TCP 3310 for apps that check uploads, freshclam keeps the signature…
v1.5.451.5 MB2 versions
Security & supply chainstandardGPL-2.0
A+
ClickHouse
Column-oriented OLAP database for real-time analytical queries over very large datasets, with high ingest rates and fast aggregations.
v26.9.5.2257.9 MB2 versions
AnalyticalstandardApache-2.0
A+
cloudnative-pg
CloudNativePG, the Kubernetes operator for PostgreSQL high availability: streaming replicas, automated failover, and backups. Built from source…
v1.30.137.4 MB3 versions
Databases & enginesstandardApache-2.0
A 1
cluster-autoscaler
Kubernetes Cluster Autoscaler, the SIG Autoscaling controller that adds nodes when pods cannot be scheduled and removes underused ones. Every cloud…
v1.36.149.3 MB3 versions
CoordinationstandardApache-2.0
D 29
CockroachDB
Distributed SQL database with PostgreSQL wire compatibility and automatic horizontal scaling and survivability. BUSL is source-available, not…
v26.2.7148.0 MB
RelationallowBUSL-1.1
B 1
code-server
VS Code in the browser (Coder's code-server), a full IDE served over HTTP. Ships Coder's official prebuilt release (bundled Node 24 + compiled VS…
v4.140.0235.9 MB2 versions
Developer tools / IDEstandardMIT
A+
composer
PHP base image with the Composer dependency manager, used as the build stage for PHP projects. Line 2.
v2.10.330.1 MB3 versions
Build toolstandardMIT
A 6
concourse
Concourse CI, built from the release tag with its web UI compiled and embedded in the one Go binary, the containerd, grpc and otel modules floated to…
v8.3.1123.7 MB
CI/CD & registrystandardApache-2.0